Add POSIX Attributes to Existing Groups

Add POSIX attributes to existing groups.

  1. Create a group_update.json file with the following request body:

    group_update.json

    {
      "schemas": [
        "urn:ietf:params:scim:api:messages:2.0:PatchOp"
      ],
      "Operations": [
        {
          "op": "add",
          "path": "urn:ietf:params:scim:schemas:oracle:idcs:extension:posix:Group:gidNumber",
          "value": 11020
        }
      ]
    }

    where:

    • gidNumber must be set to a unique group id (gid) number. Use the getent group command on Linux to see the existing group gid's.
  2. Run the following curl command to retrieve the group id's:
    curl -k -X GET -H "Content-Type: application/json" -H "Authorization: Bearer <token-string>" "https://identity-cloud-service-instance-url/admin/v1/Groups"

    where:

    • token-string is the OAuth access token that you obtained
    • identity-cloud-service-instance-url is your Oracle Identity Cloud Service Instance URL

    In the response, note the id of the group you want to update with POSIX attributes. For example, in the response below, the Marketing group id is 8c1f45fee6354e20aa9e57079082d6a2:

    .....
    	{
          "displayName": "Marketing",
          "idcsLastModifiedBy": {
            "type": "User",
            "value": "f142a5ce639643c2befe8deb0ca5bcec",
            "display": "admin example",
            "$ref": "https://identity-cloud-service-instance-url/admin/v1/Users/f142a5chjky3c2befe8deb0ca5bcec"
          },
          "idcsCreatedBy": {
            "type": "User",
            "display": "admin example",
            "value": "f142a5ce639643c2befe8deb0ca5bcec",
            "$ref": "https://identity-cloud-service-instance-url/admin/v1/Users/f142a5chjky3c2befe8deb0ca5bcec"
          },
          "id": "8c1f45fee6354e20aa9e57079082d6a2",
          "meta": {
            "created": "2019-06-10T13:23:59.451Z",
            "lastModified": "2019-06-10T13:23:59.451Z",
            "resourceType": "Group",
            "location": "https://identity-cloud-service-instance-url/admin/v1/Groups/8c1f45fee6354e20aa9e57079082d6a2"
          },
          "schemas": [
            "urn:ietf:params:scim:schemas:core:2.0:Group"
          ]
        },
        .....
  3. Run the following curl command to update the group:
    curl -k -X PATCH -H "Content-Type: application/json" -H "Authorization: Bearer <token-string>" "https://identity-cloud-service-instance-url/admin/v1/Groups/<id>" -d '@group_update.json'

    where:

    • token-string is the OAuth access token that you obtained
    • identity-cloud-service-instance-url is your Oracle Identity Cloud Service Instance URL
    • id is the id for the group you want to update with POSIX attributes

    Note:

    It is not possible to update a group with POSIX attributes using the Oracle Identity Cloud Service Administration Console.